wetransfdoc[.]iceiy[.]com

This domain is flagged as an active phishing site designed to impersonate legitimate file transfer services. Users who visit wetransfdoc.iceiy.com may encounter fake login pages that harvest credentials, payment details, or other sensitive information. The site often employs social engineering tactics, such as urgent requests to download or verify documents, to trick victims into entering their data. Analysis indicates the domain was registered on December 06, 2020, through Porkbun LLC, a registrar commonly used for both legitimate and malicious sites. Infrastructure review shows it is flagged by 5 out of 95 security vendors on VirusTotal, suggesting moderate but confirmed detection. The domain resolves to the IP address 185.27.134.176 and employs technologies like PHP, Cloudflare, and Tailwind CSS to create convincing replicas of trusted platforms while masking its true origin. If you have visited wetransfdoc.iceiy.com or entered any information on the site, immediate action is required. Disconnect the device from the network to prevent further data transmission. Run a full antivirus scan to detect any installed malware or backdoors. Change passwords for all accounts accessed on or after the visit, prioritizing email, financial, and work-related credentials. Enable multi-factor authentication where possible. Monitor accounts for unauthorized activity and report the incident to your organization’s security team or a trusted cybersecurity professional. Avoid re-engaging with the domain or any links associated with it.